Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MSHBamkWxjm46mdXcf1jmnUXgns.roa
File: MSHBamkWxjm46mdXcf1jmnUXgns.roa (raw, json)
Hash identifier: tkOy83JvWn/3ar9RF8QEn3ZEx/6lqGCIvqct952V4oE=
Subject key identifier: 31:21:C1:6A:69:16:C6:39:B8:EA:67:57:71:FD:63:9A:75:17:82:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2031
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MSHBamkWxjm46mdXcf1jmnUXgns.roa
Signing time: Fri 25 Nov 2022 04:38:26 +0000
ROA not before: Fri 25 Nov 2022 04:38:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8241 (0x2031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3121C16A6916C639B8EA675771FD639A7517827B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:da:8b:e8:f8:92:f1:1e:61:b8:57:09:85:
23:3a:2a:99:eb:7d:47:96:ef:b5:e8:73:fb:51:07:
10:2b:62:8b:60:96:91:d0:f1:c3:04:ef:b7:1e:15:
b0:58:e8:e8:0a:4d:f1:f7:4f:ce:80:d5:1a:c4:ec:
c9:33:0b:7d:49:7e:cd:52:6e:bb:ae:0e:c2:ab:28:
50:01:04:09:ed:09:76:a9:3e:d5:6f:f2:0d:b5:99:
ef:7a:70:93:75:90:d2:ce:ab:9a:d8:73:3c:b1:8e:
ce:28:9c:86:e4:2d:78:a9:7a:d2:8b:ee:11:b9:4b:
2d:ac:f4:66:cc:7e:b7:1c:8e:98:26:57:a1:cc:48:
e3:aa:40:b2:09:34:0f:2d:50:6d:f8:64:a0:0f:f5:
9a:78:27:ed:af:9e:8c:0e:73:37:c2:2e:27:72:d5:
fa:4d:27:78:7b:2e:2d:fc:38:b0:ab:a3:2f:7c:a4:
b0:22:36:27:82:c4:fb:41:e8:7b:92:82:cf:7b:56:
42:03:5b:4c:24:b5:86:9c:38:51:53:aa:72:4f:ee:
9f:f1:d3:52:67:99:f6:68:43:4b:72:5f:c3:53:5a:
f4:96:df:4a:e4:a4:61:80:4d:4d:ac:a5:92:45:91:
f2:fc:a0:ec:bb:2e:ef:1e:c3:c6:07:db:e7:b0:9c:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:C1:6A:69:16:C6:39:B8:EA:67:57:71:FD:63:9A:75:17:82:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MSHBamkWxjm46mdXcf1jmnUXgns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.208.0/21
Signature Algorithm: sha256WithRSAEncryption
17:c3:1d:dc:34:b9:de:17:0f:f6:28:6e:59:e1:3d:30:14:03:
c8:a5:0e:f2:d9:b8:0a:38:2c:60:10:a5:1c:cf:5a:30:53:b2:
8b:64:8d:45:1c:5d:a8:b0:9b:c8:bd:80:ec:7e:bc:85:8d:32:
07:1f:d6:5b:5b:22:b4:2f:6d:05:1d:7c:0e:04:9c:0e:b3:29:
2a:f0:97:e1:92:c6:72:af:ec:31:0c:32:80:3b:21:d4:c2:40:
ad:dc:62:ad:78:54:24:9c:d8:33:84:b3:54:5f:5a:c7:68:f3:
b9:77:bc:4d:ae:b9:ca:2a:c9:4e:14:e4:8d:19:fd:16:1e:e0:
b2:b8:0e:e9:60:fe:32:d9:5d:3a:12:be:9f:c3:e3:bb:1e:2f:
fa:d8:75:46:00:03:05:12:5c:c9:ff:99:09:4e:de:e2:85:12:
41:f3:5c:8d:61:45:01:8d:ab:75:b4:3b:9f:81:7a:01:54:63:
f1:0d:7f:f8:6a:a1:27:33:b7:e8:f1:a3:9f:a5:6c:e7:a9:de:
21:0b:bb:ff:d7:73:10:3d:a5:35:df:99:75:27:0e:0e:91:1e:
0f:36:9b:e6:87:6c:27:29:d1:2f:c7:b5:ee:6c:87:7e:36:54:
02:98:5b:ba:dd:86:1e:bc:c6:24:99:49:6c:27:3e:e2:be:90:
70:3a:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org